$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68b6645a-4d67-479f-8516-db0c2fdae25e.cer File: 68b6645a-4d67-479f-8516-db0c2fdae25e.cer (raw, json) Hash identifier: L5ED3IM6PZa0riWlDCpvUl0SFlnDCWj/YWZkFuFPjOY= Subject key identifier: 01:98:DB:3A:60:D4:6E:95:2E:CD:B1:AF:06:3D:B2:1D:C1:F9:B3:DC Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584AD565CE6B7B4D157F98ACE680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68b6645a-4d67-479f-8516-db0c2fdae25e/68b6645a-4d67-479f-8516-db0c2fdae25e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68b6645a-4d67-479f-8516-db0c2fdae25e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Aug 2025 16:13:04 +0000 Certificate not after: Mon 15 Nov 2027 17:13:04 +0000 Subordinate resources: AS: 393383 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:65:ce:6b:7b:4d:15:7f:98:ac:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 12 16:13:04 2025 GMT Not After : Nov 15 17:13:04 2027 GMT Subject: CN=68b6645a-4d67-479f-8516-db0c2fdae25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:29:30:da:d5:62:5b:89:cb:4a:e8:a5:57: de:5b:67:28:6c:6a:a9:07:03:bb:16:78:c4:4c:fe: e1:23:d5:a9:5a:35:d1:0f:75:f2:b7:73:78:44:9f: 5b:e7:aa:68:f7:d8:6d:92:06:b6:82:c9:98:f3:a7: 53:4f:be:f9:86:fa:17:da:2b:dd:07:3a:cb:f8:12: 56:73:8c:4f:c3:2d:ae:04:60:e9:66:5c:d0:b5:f8: 21:65:d9:95:86:82:84:74:dc:58:a0:52:d2:35:39: e2:39:48:57:17:0e:28:92:ab:0e:79:f7:a4:e2:31: 7e:cc:2a:6c:f3:76:83:a2:bf:65:3b:21:a2:68:4a: 4e:a0:2c:8e:0d:2b:77:74:cc:07:82:1d:03:03:aa: 83:54:99:6c:3d:9e:8f:bf:3b:27:32:85:7c:36:14: 94:14:6e:61:98:6c:a8:f0:9e:18:21:55:81:d8:55: 83:e9:44:58:9d:e9:6f:06:a9:8e:3d:f2:24:c7:d8: 7e:c0:6c:12:ac:18:4d:fd:51:f1:e7:de:a1:db:fa: e1:43:0f:01:da:e6:91:90:af:41:01:f1:77:cc:7c: 9c:d6:17:49:01:a3:fb:c3:ce:71:7b:e2:5b:30:12: 17:d2:36:83:63:c3:42:37:a2:21:a5:f7:33:95:e1: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:98:DB:3A:60:D4:6E:95:2E:CD:B1:AF:06:3D:B2:1D:C1:F9:B3:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68b6645a-4d67-479f-8516-db0c2fdae25e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68b6645a-4d67-479f-8516-db0c2fdae25e/68b6645a-4d67-479f-8516-db0c2fdae25e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 393383 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:23:d4:cd:55:c0:be:35:67:34:82:1d:40:87:fd:95:12:8e: f8:bd:d1:c6:39:1f:f8:eb:a9:91:d1:cf:4e:75:70:d2:c0:13: f6:b6:ed:82:6a:62:05:33:b7:a8:2c:53:28:29:4f:86:1d:1d: 59:75:f5:86:c5:d8:f2:b9:b5:91:fa:d2:10:d2:ab:db:44:6b: 1c:6a:f7:6c:0d:0b:b1:a4:2a:95:9c:db:d1:bd:53:56:65:bb: 86:17:86:04:02:04:8a:8b:d6:ad:19:2a:10:22:3b:e2:e1:2d: bc:d2:0b:e7:72:43:cd:99:1a:1e:dc:f8:d1:cb:ad:21:16:36: e3:2c:d4:b3:8b:d8:69:38:86:c3:f4:bc:48:9f:83:bd:ea:74: 76:85:e5:d2:69:48:5d:8b:14:49:2d:84:f3:2f:c4:de:ef:3b: 75:8c:1c:ee:9c:a6:a3:76:4a:50:61:d8:f1:05:51:65:89:3a: 95:ff:ae:51:6a:8a:87:cd:d7:9f:4b:31:66:4d:0a:2d:0c:a5: 1b:94:77:4f:c8:50:71:dc:51:51:03:ba:39:f7:75:e3:2c:d5: 64:cb:0e:f4:a4:63:8e:f7:ed:2d:3e:81:39:df:36:99:53:f5: 66:c0:28:ee:5c:74:4c:8c:3e:1e:de:d2:b2:61:c7:92:23:a0: 9e:b1:0c:9a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWErVZc5re00Vf5is5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDgxMjE2MTMwNFoXDTI3MTExNTE3MTMwNFowLzEtMCsGA1UEAxMk NjhiNjY0NWEtNGQ2Ny00NzlmLTg1MTYtZGIwYzJmZGFlMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3IpMNrVYluJy0ropVfeW2cobGqpBwO7FnjE TP7hI9WpWjXRD3Xyt3N4RJ9b56po99htkga2gsmY86dTT775hvoX2ivdBzrL+BJW c4xPwy2uBGDpZlzQtfghZdmVhoKEdNxYoFLSNTniOUhXFw4okqsOefek4jF+zCps 83aDor9lOyGiaEpOoCyODSt3dMwHgh0DA6qDVJlsPZ6PvzsnMoV8NhSUFG5hmGyo 8J4YIVWB2FWD6URYnelvBqmOPfIkx9h+wGwSrBhN/VHx596h2/rhQw8B2uaRkK9B AfF3zHyc1hdJAaP7w85xe+JbMBIX0jaDY8NCN6IhpfczleGYDwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFAGY2zpg1G6VLs2xrwY9sh3B+bPcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82 OGI2NjQ1YS00ZDY3LTQ3OWYtODUxNi1kYjBjMmZkYWUyNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzY4YjY2NDVhLTRkNjctNDc5Zi04 NTE2LWRiMGMyZmRhZTI1ZS82OGI2NjQ1YS00ZDY3LTQ3OWYtODUxNi1kYjBjMmZk YWUyNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgCnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGkj1M1VwL41ZzSCHUCH/ZUSjvi9 0cY5H/jrqZHRz051cNLAE/a27YJqYgUzt6gsUygpT4YdHVl19YbF2PK5tZH60hDS q9tEaxxq92wNC7GkKpWc29G9U1Zlu4YXhgQCBIqL1q0ZKhAiO+LhLbzSC+dyQ82Z Gh7c+NHLrSEWNuMs1LOL2Gk4hsP0vEifg73qdHaF5dJpSF2LFEkthPMvxN7vO3WM HO6cpqN2SlBh2PEFUWWJOpX/rlFqiofN159LMWZNCi0MpRuUd0/IUHHcUVEDujn3 deMs1WTLDvSkY4737S0+gTnfNplT9WbAKO5cdEyMPh7e0rJhx5IjoJ6xDJo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:54 2025 by rpki-client